CLAIMS 



claim: 

A method for configuring an automated banking machine comprising: 

a) receiving through operation of the banking machine at least one first authorization 
value; 

b) calculating through operation of the banking machine at least one second 
authorization value responsive to a plurality of configuration parameters 
associated with the banking machine; 

c) determining through operation of the banking machine that the at least one first 
authorization value corresponds to the at least one second authorization value; and 

d) enabling configuration of software on the banking machine responsive to the 
determination in step (c). 

The method according to claim 1 , further comprising: 
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e) configuring the banking machine responsive to the configuration parameters. 



3. The method according to claim 2, wherein in step (b) the configuration parameters are 
indicative of which of a plurality of software components are authorized to be installed on the 
banking machine. 

5 4. The method according to claim 2, wherein step (b) includes obtaining at least one of the 
configuration parameters from a hardware device in the banking machine. 

5. The method according to claim 2, wherein step (b) includes obtaining at least one 
configuration parameter which comprises a unique identification value associated with a 
processor in the banking machine. 

10 6. The method according to claim 2, wherein in step (b) the configuration parameters 
include a terminal identification number and an expiration parameter. 

7. The method according to claim 6, further comprising: 

f) determining through operation of the banking machine responsive to the 

expiration parameter that configuration of software on the banking machine is not 
15 authorized; and 
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g) preventing configuration of software on the banking machine responsive to the 
determination in step (f). 

8. The method according to claim 2, wherein in step (b) the at least one second authorization 
value is calculated responsive to at least one one-way hash function. 

9. The method according to claim 8, wherein in step (b) the at least one second authorization 
value is calculated responsive to at least one secret value. 

10. The method according to claim 1 wherein in step (a) at least one authorization value is 
received by the banking machine responsive to the banking machine contacting an authorizing 
entity. 

1 1 . The method according to claim 10, further comprising operating the banking machine so 
as to periodically contact the authorizing entity to receive at least one authorization value, 
wherein the banking machine ceases operation responsive to not receiving at least one 
authorization value. 

12. Computer readable media bearing instructions which are operative to cause a computer in 
the automated banking machine to carry out the method steps recited in claim 1 . 
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13. A method for configuring an automated banking machine comprising: 

a) receiving a configuration certificate through operation of the banking machine; 

b) authenticating at least one digital signature associated with the certificate through 
operation of the banking machine; 

c) enabling configuration of software on the banking machine responsive to the 
certificate and authentication of the at least one digital signature in step (b). 

14. The method according to claim 1 3, wherein in step (a) the certificate includes the digital 
signature, wherein in step (b) the digital signature is authenticated responsive to a public key of a 
licensing authority. 

15. The method according to claim 13, wherein in step (a) the certificate corresponds to at 
least one software component authorized to be installed on the banking machine, and further 
comprising installing the at least one software component on the banking machine. 

16. The method according to claim 13, wherein in step (a) the certificate includes a plurality 
of sets of configuration rules each set corresponding to at least one of a plurality of automated 
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banking machines, and wherein in step (c) the banking machine is enabled to be configured 
responsive to at least one set. 

1 7. The method according to claim 13, wherein the certificate further includes an expiration 
parameter, and further comprising: 

d) determining through operation of the banking machine responsive to the 

expiration parameter that configuration of the software on the machine is not 
authorized; and 



e) preventing configuration of software on the banking machine responsive to the 
determination in step (d). 



18. The method according to claim 13, wherein in step (a) the certificate includes an 
identification value unique to the banking machine. 

1 9. The method according to claim 1 8, further comprising prior to step (c): 

determining through operation of the banking machine that the identification 
value corresponds to a hardware embedded identification value in the banking 
machine. 
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20. The method according to claim 13, wherein in step (a) the certificate includes a terminal 
identification value, wherein step (c) includes associating the machine with the terminal 
identification value. 

21 . The method according to claim 20, further comprising: 

5 d) determining that the terminal identification value has changed; and 

e) preventing the machine from performing at least one transaction function 
responsive to the determination in step (d). 

22. The method according to claim 13, wherein step (a) includes retrieving the certificate 
10 from a licensing authority. 

23. The method according to claim 13, wherein step (a) includes receiving the certificate 
from a server in operative connection with the banking machine. 

24. Computer readable media bearing instructions which are operative to cause a computer in 
the automated banking machine to carry out the method steps recited in claim 13. 

15 25. A method for configuring an automated banking machine comprising: 
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a) providing a plurality of configuration parameters for the automated banking 
machine; 

b) generating an authorization key responsive to the configuration parameters, at 
least one one-way hash function, and at least one secret number; and 

c) enabling the authorization key to be used for configuring software on the 
automated banking machine. 

A method for configuring an automated banking machine comprising: 

a) providing a plurality of configuration parameters for the automated banking 
machine; 

b) generating a configuration certificate that includes the configuration parameters; 

c) digitally signing the certificate with a private key of a licensing authority; and 

d) enabling configuration of software on the automated banking machine responsive 
to the configuration certificate. 
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A method for configuring an automated banking machine comprising: 

a) providing a plurality of configuration parameters for configuring software on the 
automated banking machine; 

b) storing the parameters in a database in association with a terminal identification 
value associated with the machine; and 

c) enabling the banking machine to access the parameters stored in the database 
remotely through a network. 
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